Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c450f0cc-a955-3df5-a9d5-301fa1253097.roa
File:                     c450f0cc-a955-3df5-a9d5-301fa1253097.roa (raw, json)
Hash identifier:          8A6/4t9OdDWASjtUxxYfUxlF0/hokUiYtfAhUP0U+zc=
Subject key identifier:   0A:FD:ED:13:6E:C2:EE:77:5E:7D:62:91:27:F7:37:1D:EA:56:3A:1A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497F862B15D710F6815D3B60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c450f0cc-a955-3df5-a9d5-301fa1253097.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396609
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:86:2b:15:d7:10:f6:81:5d:3b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=213cce38-24ce-4e0b-a590-ec39bd93509a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9b:d1:9c:49:4d:7f:d7:6c:9e:aa:3b:6d:43:
                    88:99:14:26:0b:f6:b2:5c:d2:e8:9c:aa:d4:d7:58:
                    76:3d:3b:67:44:78:75:c6:cf:e0:fc:41:33:e2:10:
                    49:e2:a4:2d:37:24:c9:32:9a:9e:67:fd:43:ff:c6:
                    4e:90:48:d1:56:da:a8:00:aa:89:91:46:1c:ac:ee:
                    1d:c0:a0:44:04:1c:b3:06:0c:56:fe:21:e3:ce:10:
                    60:f9:69:33:0b:47:73:dd:68:d7:6c:5b:37:99:72:
                    49:b3:79:c3:20:d6:7c:09:b4:bf:83:12:89:43:ba:
                    d9:7a:02:1a:bc:41:bd:d5:ea:30:72:13:c8:d1:38:
                    96:00:3e:b7:55:a0:6b:6a:e3:b6:3a:2c:63:b3:82:
                    66:6e:2c:a9:1b:05:bd:11:c4:e8:21:a0:4d:af:7f:
                    c0:03:30:f6:52:8f:73:6c:32:78:8e:e9:90:17:96:
                    03:fe:76:49:27:42:11:14:e4:35:04:c2:30:63:54:
                    3e:67:57:ce:fc:76:8f:67:5f:3c:d1:45:14:75:b7:
                    16:cf:d6:2e:e4:f3:e6:c8:f9:4f:d7:7d:d8:f5:af:
                    e6:d5:d3:e2:af:5f:fb:cd:59:3e:50:86:3a:23:f1:
                    b6:c8:c3:4f:41:ba:0a:12:0c:46:95:eb:9d:be:10:
                    22:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FD:ED:13:6E:C2:EE:77:5E:7D:62:91:27:F7:37:1D:EA:56:3A:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c450f0cc-a955-3df5-a9d5-301fa1253097.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:8f:2f:f5:e1:62:43:4f:7e:d8:da:57:16:50:a0:66:65:e0:
         dd:09:fb:ba:b1:2d:32:e4:4f:bf:74:49:37:78:9f:bd:aa:2d:
         c8:7c:a7:40:ce:65:2a:13:91:10:a1:7d:3f:26:eb:89:1a:1c:
         f4:83:d0:7b:2e:9a:f5:c6:52:73:64:3f:d5:e3:f1:7c:3b:9c:
         e0:37:63:70:ad:22:ea:41:24:74:34:83:49:df:cc:f9:0e:45:
         2a:94:57:03:6b:65:89:9e:91:c0:b9:a3:4e:9a:13:8c:62:24:
         87:11:24:13:18:f3:e3:e0:66:0b:5e:06:c6:d5:65:8b:58:ec:
         ac:89:d6:31:b4:88:87:23:ce:36:b2:b3:fa:d1:8e:c9:da:9e:
         08:98:ab:51:ae:4e:75:da:48:cb:84:5f:2c:72:ce:65:c2:a0:
         82:86:42:35:bd:81:5c:2f:be:52:a1:34:1e:aa:d2:f0:5f:39:
         be:01:ae:55:f4:c5:49:13:9d:9c:da:60:94:aa:ee:b0:f6:88:
         3c:7f:14:4b:54:e9:53:bf:b4:a2:0e:1b:43:b4:8f:a7:22:50:
         93:05:36:eb:64:8f:16:13:7f:48:68:d2:b5:e2:48:08:c6:20:
         38:45:71:45:6e:1b:0a:7f:94:02:95:d6:b3:39:cf:90:48:5a:
         8d:d2:03:04
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9Jf4YrFdcQ9oFdO2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MjEzY2NlMzgtMjRjZS00ZTBiLWE1OTAtZWMzOWJkOTM1MDlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5vRnElNf9dsnqo7bUOImRQmC/ayXNLonKrU
11h2PTtnRHh1xs/g/EEz4hBJ4qQtNyTJMpqeZ/1D/8ZOkEjRVtqoAKqJkUYcrO4d
wKBEBByzBgxW/iHjzhBg+WkzC0dz3WjXbFs3mXJJs3nDINZ8CbS/gxKJQ7rZegIa
vEG91eowchPI0TiWAD63VaBrauO2Oixjs4JmbiypGwW9EcToIaBNr3/AAzD2Uo9z
bDJ4jumQF5YD/nZJJ0IRFOQ1BMIwY1Q+Z1fO/HaPZ1880UUUdbcWz9Yu5PPmyPlP
133Y9a/m1dPir1/7zVk+UIY6I/G2yMNPQboKEgxGleudvhAiiQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFAr97RNuwu53Xn1ikSf3Nx3qVjoaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzQ1MGYwY2MtYTk1NS0z
ZGY1LWE5ZDUtMzAxZmExMjUzMDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCpjy/14WJDT37Y2lcWUKBmZeDdCfu6sS0y5E+/
dEk3eJ+9qi3IfKdAzmUqE5EQoX0/JuuJGhz0g9B7Lpr1xlJzZD/V4/F8O5zgN2Nw
rSLqQSR0NINJ38z5DkUqlFcDa2WJnpHAuaNOmhOMYiSHESQTGPPj4GYLXgbG1WWL
WOysidYxtIiHI842srP60Y7J2p4ImKtRrk512kjLhF8scs5lwqCChkI1vYFcL75S
oTQeqtLwXzm+Aa5V9MVJE52c2mCUqu6w9og8fxRLVOlTv7SiDhtDtI+nIlCTBTbr
ZI8WE39IaNK14kgIxiA4RXFFbhsKf5QCldazOc+QSFqN0gME
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:34:44 2026 by rpki-client